Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: y/QV9htUB0SVJYWuszEoP0Bczy53wdwXfcsZzVqXtX8=
Subject key identifier: B0:5E:CD:56:4B:5B:6A:42:D8:EE:C9:58:6A:09:85:7E:1E:A1:6E:73
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0198D54EC5BD3CE105E243FDBF6173C3EA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 05:02:46 +0000
Manifest this update: Sat 23 Aug 2025 05:02:46 +0000
Manifest next update: Sun 24 Aug 2025 05:02:46 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: tYVu0ACDJrqHGR3BzTInZCa8AZJIg0Gp1ibCSoQe79I=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c5:bd:3c:e1:05:e2:43:fd:bf:61:73:c3:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Aug 23 05:02:46 2025 GMT
Not After : Aug 24 05:02:46 2025 GMT
Subject: CN=b05ecd564b5b6a42d8eec9586a09857e1ea16e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:b9:76:db:e0:69:89:36:e8:fa:1d:b3:94:
06:d9:0c:a4:0b:e0:70:2d:66:7c:64:e4:66:38:0c:
19:ed:e8:68:11:73:29:27:e7:6f:36:cb:13:7a:2c:
30:46:3d:6d:14:15:a1:97:93:5b:15:e1:c6:de:2a:
af:4c:c1:ac:17:34:6d:4d:c7:60:ea:c2:ca:ba:b2:
65:b7:e8:2b:e9:e9:6a:3a:fb:9e:0e:32:0c:79:9e:
a3:89:45:5f:95:ca:31:31:99:a9:5c:95:71:b1:30:
c4:a1:cf:a0:0f:7e:4e:c8:fa:80:f9:d2:f9:bc:65:
1d:4a:9e:10:41:4f:70:de:b2:62:57:3f:89:03:4a:
10:ff:ad:f7:d8:e7:e4:f7:a2:6e:c2:b5:26:66:9e:
73:86:34:0e:76:15:70:dd:47:2c:37:fa:5a:e2:25:
f1:bc:d0:ae:a6:41:7e:e5:3d:8f:52:6d:42:10:de:
8d:2d:a0:89:61:76:14:47:7c:86:0e:aa:a1:ad:b9:
a0:e0:81:b5:fd:a4:d8:d7:92:e9:96:db:bb:34:4a:
4f:da:04:2c:c0:45:bf:85:ea:b4:b2:62:a9:93:81:
9b:a7:68:09:f9:51:b5:0c:7b:a9:52:63:e2:cb:44:
50:43:4c:ec:54:83:0b:5b:9f:99:40:94:36:eb:ec:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5E:CD:56:4B:5B:6A:42:D8:EE:C9:58:6A:09:85:7E:1E:A1:6E:73
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:a9:a9:11:ce:c7:4d:9b:f9:77:34:f0:df:e9:44:6f:9c:8d:
ae:dd:e9:2b:31:47:dd:a3:e5:9e:ec:e0:e7:bc:8a:83:66:48:
87:ce:a6:53:42:d5:81:40:fc:55:bf:20:7e:f3:63:65:87:93:
36:99:25:e3:17:9a:b0:04:75:1e:2c:76:d3:98:9d:5a:d2:ee:
28:77:b1:6f:8a:d2:82:77:c7:db:68:7b:0c:ea:d1:ef:35:06:
d1:a0:f3:01:b2:3b:93:64:ae:22:69:4f:c2:49:39:da:e6:c6:
f7:94:64:6d:00:97:7b:b5:91:22:0e:26:48:bb:4d:7c:7d:ca:
3b:b1:06:58:88:92:b1:0a:b5:8e:84:e5:97:5e:db:99:63:62:
24:5a:15:26:e2:8c:82:fe:7b:ab:4c:d1:77:88:87:ba:41:ad:
a2:c5:09:f5:ef:dc:67:a5:93:df:9c:58:9f:8b:e9:fc:8e:b1:
35:3a:28:74:b0:31:4f:e3:74:83:0a:7e:c1:4f:0b:07:74:fc:
9e:a1:e5:c5:db:5e:70:f9:f5:6e:b8:93:f2:12:8a:19:ed:f0:
c0:9e:82:f1:a5:f0:8d:f3:eb:99:d5:d7:5c:83:4f:d5:4b:f7:
78:12:1d:70:d9:12:3f:9c:cf:92:c8:74:d0:fd:e9:4d:e5:dd:
47:4e:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:20 2025 by rpki-client